61cfe83259640df9f19df2be4b67bb1c6e5816ac52b8a5a02ee8b79bde4b2b70.bin
Classification: Malicious
61cfe83259640df9f19df2be4b67bb1c6e5816ac52b8a5a02ee8b79bde4b2b70.bin is a malicious file sample. Linked to Fin7 activity. Detected by 77 antivirus engines.
Detection summary
- 77 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: FIN7 (G0046)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Abuse.ch | 2021-05-18 14:40:13 | 2021-05-18 14:40:13 | malicious-activity | |
| FIN7 | Abuse.ch | 2021-05-18 14:40:13 | 2021-05-18 14:40:13 | malicious-activity | G0046 FIN7 |
Sample information
- Filenames
- 61cfe83259640df9f19df2be4b67bb1c6e5816ac52b8a5a02ee8b79bde4b2b70.bin
- File type
- application/x-dosexec
- MD5
1484570d0fe4299d294bf71c64931a1f- SHA-1
55eefa89ac637dd8ba7992ebbbc135d1ae6d85cd- SHA-256
61cfe83259640df9f19df2be4b67bb1c6e5816ac52b8a5a02ee8b79bde4b2b70- First indexed
- 2021-05-18 17:15:12
- Last updated
- 2026-07-04 01:05:47
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Zusy.378855 |
| FireEye | Generic.mg.1484570d0fe4299d |
| CAT-QuickHeal | Trojan.Agentb |
| ALYac | Trojan.Agent.DiceLoader |
| Cylance | Unsafe |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Alibaba | Trojan:Win32/Agentb.d0406c2f |
| K7GW | Riskware ( 0040eff71 ) |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| BitDefenderTheta | Gen:NN.ZedlaF.34690.aq4@a8yqw0b |
| Cyren | W32/Trojan.BVED-8060 |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win32/Agent.ACZO |
| APEX | Malicious |
| Kaspersky | Trojan.Win32.Agentb.kkru |
| BitDefender | Gen:Variant.Zusy.378855 |
| AegisLab | Trojan.Win32.Doris.4!c |
| Rising | Trojan.Agent!8.B1E (CLOUD) |
| Ad-Aware | Gen:Variant.Zusy.378855 |
| Sophos | Mal/Generic-S (PUA) |
| VIPRE | Trojan.Win32.Generic!BT |
| TrendMicro | TROJ_GEN.R002C0WDP21 |
| McAfee-GW-Edition | Artemis |
| Emsisoft | Gen:Variant.Zusy.378855 (B) |
| Ikarus | Trojan.Win32.Agent |
| Avira | TR/Redcap.wtkxu |
| Gridinsoft | Trojan.Win32.DiceLoader.dd!s1 |
| ZoneAlarm | Trojan.Win32.Agentb.kkru |
| GData | Gen:Variant.Zusy.378855 |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Agent.C4476205 |
| Acronis | suspicious |
| VBA32 | suspected of Trojan.Downloader.gen |
| MAX | malware (ai score=80) |
| Malwarebytes | Malware.AI.4114574104 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0WDP21 |
| Fortinet | W32/PossibleThreat |
| Webroot | W32.Trojan.Gen |
| Panda | Trj/GdSda.A |
| Alibaba | Trojan:Win32/Redcap.d0406c2f |
| Antiy-AVL | Trojan/Win64.DiceLoader |
| Arcabit | Trojan.Razy.DD4884 |
| Bkav | W32.Malware.A99EF6A6 |
| CTX | dll.trojan.diceloader |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.DownLoader39.19905 |
| ESET-NOD32 | Win32/Agent.ACZO trojan |
| Emsisoft | Gen:Variant.Razy.870532 (B) |
| GData | Gen:Variant.Razy.870532 |
| Detected | |
| Jiangmin | HackTool.Inject.dfh |
| Kingsoft | malware.kb.a.930 |
| Lionic | Trojan.Win32.DiceLoader.4!c |
| Malwarebytes | Malware.AI.1753263747 |
| MaxSecure | Trojan.Malware.846157.susgen |
| McAfeeD | ti!61CFE8325964 |
| MicroWorld-eScan | Gen:Variant.Razy.870532 |
| Microsoft | Trojan:Win32/Agent!MSR |
| NANO-Antivirus | Trojan.Win32.Redcap.ivsoyn |
| Paloalto | generic.ml |
| Rising | Trojan.Agent!8.B1E (TFE:2:6qmSRZU99KQ) |
| Sangfor | Trojan.Win32.FIN7.IOC |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Mal/Generic-S |
| Tencent | Win32.Backdoor.Lizar.Nzgf |
| TrellixENS | GenericRXOP-UR!1484570D0FE4 |
| TrendMicro-HouseCall | Trojan.Win32.DICELOADER.SM |
| VBA32 | BScope.TrojanRansom.Scatter |
| VIPRE | Gen:Variant.Razy.870532 |
| Varist | W32/Agent.GED.gen!Eldorado |
| ViRobot | Trojan.Win32.S.Agent.8704.ZZ |
| Xcitium | Malware@#tph64z7fbsew |
| Zillya | Trojan.Agent.Win32.2000712 |
| alibabacloud | Trojan:Win/Agent.AWPD |
| huorong | Trojan/Loader.o |